Privacy

Information you provide

Depending on the features you use, information can include your chosen name, email address or phone number for sign-in, experience details, expectations, and your responses and completion status. You can begin some flows with an anonymous account.

Only share information needed for the experience. A chosen name does not make everything you submit anonymous. Avoid including another person’s private information without their permission.

Instagram messages and account information

When you contact @consent.care, Instagram can deliver message contents, account identifiers, timestamps, and associated message events, such as edits, reactions, and read events. The integration stores deliveries in a private database to support handling messages and diagnosing delivery problems. Automated replies are not currently configured.

The integration can also retrieve public professional-account information through Instagram business discovery, including usernames, follower counts, and media counts. Connecting our business account does not give us general access to other people’s private Instagram inboxes.

How information is used and shared

Information supports sign-in, saving experiences, recording responses, showing the relevant experience state, handling communications, and operating and securing the service. Information submitted to a host’s consent flow can be available to that host as part of running the experience. Check the flow’s visibility information before submitting.

Hosting, database, authentication, and connected-platform providers process information needed to deliver their services. Instagram and Facebook also handle information under their own privacy terms. Consent Care does not sell personal information or publish consent responses as public ratings.

Browser storage

The website uses browser storage for a saved appearance preference and unfinished host drafts. Authentication uses session storage mechanisms, including cookies. On a shared device, sign out and clear saved drafts and site data when finished.

Optional website analytics

With your permission, Google Analytics uses cookies to measure visits and selected actions on our public website, such as interest in joining and opening our Instagram page. Google receives technical information such as browser and device characteristics, approximate location, and a cookie identifier. We exclude private host and participant routes, individual experience guides, answers, form contents, email addresses, query strings, and private identifiers from analytics.

Analytics stays off until you choose “Allow analytics.” You can decline or withdraw your permission through “Analytics preferences” on public pages. Advertising features are disabled. Google processes analytics data under its own infrastructure, which may involve processing outside your country. Learn how Google uses information from sites that use its services.

Storage and retention

Instagram deliveries are stored behind database access controls. Incoming deliveries are checked for the platform’s signature, and identical deliveries are deduplicated. These controls reduce risk but do not guarantee security.

The demo does not currently apply automatic expiry to Instagram deliveries. They remain stored until removed. You can request deletion using the contact below. Copies held in infrastructure backups may remain until those backups expire.

Your information and deletion requests

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of your information, restrict or object to its use, withdraw consent where processing relies on it, and complain to a data protection authority.

Email info@consent.care for privacy questions or to request access, correction, or deletion of your information, including Instagram data. For deletion, use the subject “Data deletion request” and include your Instagram username or the account or experience concerned. Do not include passwords or access tokens. We may need to verify that the information belongs to you before acting.

After verification, we will identify and remove the relevant information from the demo’s active systems, subject to any applicable legal requirements, and confirm the outcome by email. Deleting a shared experience record may affect other participants, so requests are reviewed individually.

Removing an app connection in Instagram stops the access that connection permits. It does not, by itself, delete information already stored by Consent Care or information held independently by Instagram or an experience host.

Updates

We will update this page and its effective date when our practices change. For questions, contact info@consent.care.